# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=740 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 741 --- ## [Elasticsearch curl error](https://discuss.elastic.co/t/elasticsearch-curl-error/318391)
**Author:** [@thepawankumar](https://discuss.elastic.co/u/thepawankumar)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 7:14am UTC](https://discuss.elastic.co/t/elasticsearch-curl-error/318391 "2022-11-08T07:14:04Z")
curl -X GET -u something:PASSWD https://20.197.3.229:5500 curl: (60) SSL certificate problem: self signed certificate in certificate chain More details here: curl - SSL CA Certificates curl failed to verify the legiti… --- ## [Unrecognized character escape ':'](https://discuss.elastic.co/t/unrecognized-character-escape/318393)
**Author:** [@MStrauch](https://discuss.elastic.co/u/MStrauch)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 7:10am UTC](https://discuss.elastic.co/t/unrecognized-character-escape/318393 "2022-11-08T07:10:29Z")
Hi, I'm executing follow fulltext query string: "query": { "bool": { "filter": \[ { "nested": { "path": "@payload.identifier", "query": { "query\_string":… --- ## [Monitoring AIX metrics to ELK](https://discuss.elastic.co/t/monitoring-aix-metrics-to-elk/318390)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 0\ **Last updated:** [November 8, 2022, 6:54am UTC](https://discuss.elastic.co/t/monitoring-aix-metrics-to-elk/318390 "2022-11-08T06:54:14Z")
Hi Community, We want infra metrics data to ELK. The problem is that elastic beats does not support IBM AIX servers. Is there any other way we can ship metric data to ELK. --- ## [Node Uptime Bar Graph](https://discuss.elastic.co/t/node-uptime-bar-graph/318385)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [November 8, 2022, 6:52am UTC](https://discuss.elastic.co/t/node-uptime-bar-graph/318385 "2022-11-08T06:52:20Z")
Hi Community, ELK version 7.17.5. We want to monitor Node/System availability using metricbeat. We want to create a bar graph of this. I created a dashboard for this The issue i am facing here is for one node i am… --- ## [Elastic Search cannot login after disk full (\>90%)](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511)
**Author:** [@zahir](https://discuss.elastic.co/u/zahir)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 6:42am UTC](https://discuss.elastic.co/t/elastic-search-cannot-login-after-disk-full-90/317511 "2022-11-08T06:42:01Z")
I suddenly unable to login Elastic Search after my snapshot backup is failed. I perform the snapshot backup after disk usage is more than 90%. Now my snapshot failed and my disk is 100% usage. Appreciate if anyone f… --- ## [AUTO Cross Cluster Replication (CCR)](https://discuss.elastic.co/t/auto-cross-cluster-replication-ccr/318298)
**Author:** [@pankaj\_sharma1](https://discuss.elastic.co/u/pankaj_sharma1)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 8:25am UTC](https://discuss.elastic.co/t/auto-cross-cluster-replication-ccr/318298 "2022-11-07T08:25:16Z")
Can we do auto CCR for index on the bases of Alias or be auto ccr for this index(this is the part f roll over index ). index pattern is : alias index filter routing.index routing.search is\_write\_i… --- ## [Data Indices are recovery](https://discuss.elastic.co/t/data-indices-are-recovery/316887)
**Author:** [@Ravi\_S1](https://discuss.elastic.co/u/Ravi_S1)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 5:19am UTC](https://discuss.elastic.co/t/data-indices-are-recovery/316887 "2022-11-08T05:19:52Z")
I would like to check with community on recovery state of indices... after upgrading the ELK stack to 8.4.1, i could see that data indices are recovering very often.. Is there any reason for this behavior. GET \_cat/reco… --- ## [No results in Kibana search](https://discuss.elastic.co/t/no-results-in-kibana-search/318378)
**Author:** [@azamf](https://discuss.elastic.co/u/azamf)\ **Replies:** 5\ **Last updated:** [November 8, 2022, 3:09am UTC](https://discuss.elastic.co/t/no-results-in-kibana-search/318378 "2022-11-08T03:09:24Z")
I'm trying to search against an existing index but the request yields no results. I know there is data since other users can see the index and view data in the same time frame. I am able to view data in most indices in … --- ## [KNN search things in ES V8.4.0](https://discuss.elastic.co/t/knn-search-things-in-es-v8-4-0/313748)
**Author:** [@CGM397](https://discuss.elastic.co/u/CGM397)\ **Replies:** 5\ **Last updated:** [November 7, 2022, 11:54pm UTC](https://discuss.elastic.co/t/knn-search-things-in-es-v8-4-0/313748 "2022-11-07T23:54:00Z")
Hi there, I am facing some issues with knn search in es v8, hope someone can help: env: five es v8.4.0 nodes in a cluster each node in a linux server(Ubuntu 16.04, 48 Logic Cores, 180GB Memory) index mapping:(five sh… --- ## [Does k-nearest neighbor (kNN) search - supports search\_after pagination?](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222)
**Author:** [@Dinesh\_Sonachalam](https://discuss.elastic.co/u/Dinesh_Sonachalam)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 11:44pm UTC](https://discuss.elastic.co/t/does-k-nearest-neighbor-knn-search-supports-search-after-pagination/315222 "2022-11-07T23:44:47Z")
Reference: kNN search: k-nearest neighbor (kNN) search | Elasticsearch Guide \[master\] | Elastic Search after pagination: https://www.elastic.co/guide/en/elasticsearch/reference/current/paginate-search-results.html#sea… --- ## [Looking for a way to grab named stats from DNS servers and output them to Elastic for better visibility](https://discuss.elastic.co/t/looking-for-a-way-to-grab-named-stats-from-dns-servers-and-output-them-to-elastic-for-better-visibility/318364)
**Author:** [@hardeepsingh3](https://discuss.elastic.co/u/hardeepsingh3)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 8:28pm UTC](https://discuss.elastic.co/t/looking-for-a-way-to-grab-named-stats-from-dns-servers-and-output-them-to-elastic-for-better-visibility/318364 "2022-11-07T20:28:33Z")
What is the best way to grab the named stats such as Resolver Statistics (IPv4 queries sent, IPv4 responses received etc) and Cache Statistics (cache hits, cache misses etc) and parse them to be able to visualize them on… --- ## [Illegal\_argument\_exception: index.lifecycle.rollover\_alias \[centrologs\] does not point to index \[centrologs-2022.09.28-000001\] in Kibana 8.2.2](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-centrologs-does-not-point-to-index-centrologs-2022-09-28-000001-in-kibana-8-2-2/315962)
**Author:** [@lakshmiD](https://discuss.elastic.co/u/lakshmiD)\ **Replies:** 1\ **Last updated:** [October 10, 2022, 10:19pm UTC](https://discuss.elastic.co/t/illegal-argument-exception-index-lifecycle-rollover-alias-centrologs-does-not-point-to-index-centrologs-2022-09-28-000001-in-kibana-8-2-2/315962 "2022-10-10T22:19:57Z")
Hi Team, Index lifecycle error-Policy rollover happening untill hot phase not going to next step illegal\_argument\_exception: index.lifecycle.rollover\_alias \[centrologs\] does not point to index \[centrologs-2022.09.28\] M… --- ## [Painless stored script "dynamic" compile error](https://discuss.elastic.co/t/painless-stored-script-dynamic-compile-error/318357)
**Author:** [@karasick](https://discuss.elastic.co/u/karasick)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 5:02pm UTC](https://discuss.elastic.co/t/painless-stored-script-dynamic-compile-error/318357 "2022-11-07T17:02:36Z")
Can someone please explain to me the next error ? "error": { "type": "illegal\_argument\_exception", "reason": "failed to execute script", "caused\_by": { "type": "general\_script\_e… --- ## [ElasticSearch Instance is going down periodically with no errors in logs](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133)
**Author:** [@nandeeswara](https://discuss.elastic.co/u/nandeeswara)\ **Replies:** 7\ **Last updated:** [November 7, 2022, 5:24pm UTC](https://discuss.elastic.co/t/elasticsearch-instance-is-going-down-periodically-with-no-errors-in-logs/317133 "2022-11-07T17:24:31Z")
We have an application in Liferay portal and it is using Elasticsearch service as remote server. Elasticsearch on a remote server is going down periodically even though the memory , CPU are highly available. Currently … --- ## [Fuzziness parameter in a query](https://discuss.elastic.co/t/fuzziness-parameter-in-a-query/318344)
**Author:** [@Ivo\_Tavares](https://discuss.elastic.co/u/Ivo_Tavares)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 3:23pm UTC](https://discuss.elastic.co/t/fuzziness-parameter-in-a-query/318344 "2022-11-07T15:23:14Z")
I'm trying to understand the documentation of the fuzziness parameter. I'm not sure what the low and high values for AUTO mean. Why is it that when I do a query with "AUTO:0,2" I get a result(supposedly an exact match)… --- ## [Kubernetes Pod and container memory usage always at 0](https://discuss.elastic.co/t/kubernetes-pod-and-container-memory-usage-always-at-0/317665)
**Author:** [@sebglon](https://discuss.elastic.co/u/sebglon)\ **Replies:** 4\ **Last updated:** [November 7, 2022, 4:44pm UTC](https://discuss.elastic.co/t/kubernetes-pod-and-container-memory-usage-always-at-0/317665 "2022-11-07T16:44:22Z")
Hi, I have an issue on MetricBeat v8.4.2. I use it to collect Kubernetes (v1.22.2) metrics. But i always have kubernetes.container.memory.usage.bytes and kubernetes.pod.memory.usage.bytes at 0 Here are my clusterRole… --- ## [Visualize Custom Time from a Scripted Field](https://discuss.elastic.co/t/visualize-custom-time-from-a-scripted-field/318272)
**Author:** [@g.bas](https://discuss.elastic.co/u/g.bas)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 4:42pm UTC](https://discuss.elastic.co/t/visualize-custom-time-from-a-scripted-field/318272 "2022-11-07T16:42:51Z")
Hello I am new to Kibana and would like to create my own visual representation where the horizontal axis represents time which is derived from one of my runtime fields. The field is called Duration and is in milliseconds… --- ## [Need Help to extract custom log data using gork](https://discuss.elastic.co/t/need-help-to-extract-custom-log-data-using-gork/318350)
**Author:** [@ipasa](https://discuss.elastic.co/u/ipasa)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 4:20pm UTC](https://discuss.elastic.co/t/need-help-to-extract-custom-log-data-using-gork/318350 "2022-11-07T16:20:43Z")
We want to extract some custom logs like this, \[2022-10-19 07:45:21\] test\_site.INFO: REQUEST: \[{"username":"6HANT","password":"u5469!230","grant\_type":"password"},{"Content-Type":"application/json"},"https://abc.SD.com:… --- ## [Filebeat Fail to get Kibana Version \> x509: certificate signed by unknown authority](https://discuss.elastic.co/t/filebeat-fail-to-get-kibana-version-x509-certificate-signed-by-unknown-authority/318349)
**Author:** [@janis.cimins](https://discuss.elastic.co/u/janis.cimins)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 3:57pm UTC](https://discuss.elastic.co/t/filebeat-fail-to-get-kibana-version-x509-certificate-signed-by-unknown-authority/318349 "2022-11-07T15:57:46Z")
Hello! I have set up basic Elastic+Kibana setup and I\`m trying to get Filebeat up and running on the server. I have configured it as from quick start guide, but I get this error: Exiting: error connecting to Kibana: … --- ## [Is it possible to create sum of counter\_rate across implicit dimensions](https://discuss.elastic.co/t/is-it-possible-to-create-sum-of-counter-rate-across-implicit-dimensions/318343)
**Author:** [@wiki.warx](https://discuss.elastic.co/u/wiki.warx)\ **Replies:** 3\ **Last updated:** [November 7, 2022, 3:45pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-sum-of-counter-rate-across-implicit-dimensions/318343 "2022-11-07T15:45:28Z")
I have metric reported from application (let's call it) tasks. This metric is reported as counter by multiple instances of application. In addition this metric is reported per clientid and per userid (both are UUIDs). I… --- ## [Interval query with filters to include in max gap?](https://discuss.elastic.co/t/interval-query-with-filters-to-include-in-max-gap/318346)
**Author:** [@Broccolimon](https://discuss.elastic.co/u/Broccolimon)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 3:26pm UTC](https://discuss.elastic.co/t/interval-query-with-filters-to-include-in-max-gap/318346 "2022-11-07T15:26:42Z")
Hey! I have a query that is looking for the terms "fox" and "brown" in an interval of 10 positions and i would like to filter any result with the word "quick" which is 5 position before interval start and 5 position aft… --- ## [Phrase\_slop does not affect query\_string](https://discuss.elastic.co/t/phrase-slop-does-not-affect-query-string/318345)
**Author:** [@MultiheadAttention](https://discuss.elastic.co/u/MultiheadAttention)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 3:21pm UTC](https://discuss.elastic.co/t/phrase-slop-does-not-affect-query-string/318345 "2022-11-07T15:21:51Z")
My search query { "query\_string": {"query": 'foo bar', "phrase\_slop": 1, "default\_operator": "AND"} } returns the following results: 'foo bar' 'fo… --- ## [How to write a multi-lined script in C# / Nest?](https://discuss.elastic.co/t/how-to-write-a-multi-lined-script-in-c-nest/317907)
**Author:** [@Marcus\_Bullock](https://discuss.elastic.co/u/Marcus_Bullock)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 2:51pm UTC](https://discuss.elastic.co/t/how-to-write-a-multi-lined-script-in-c-nest/317907 "2022-11-07T14:51:45Z")
Hi all, I am trying to write a statement like this but in Nest / C# object initializer syntax: GET /\_search { "query": { "bool": { "filter": { "script": { "script": """ double … --- ## ["best\_compression" not compressing the data](https://discuss.elastic.co/t/best-compression-not-compressing-the-data/318320)
**Author:** [@ashika](https://discuss.elastic.co/u/ashika)\ **Replies:** 2\ **Last updated:** [November 7, 2022, 2:27pm UTC](https://discuss.elastic.co/t/best-compression-not-compressing-the-data/318320 "2022-11-07T14:27:25Z")
Hello team, I was applying "best\_compression" compressing type to my existing elasticsearch indices, but I don't see any significant reduction happening in the indices size. The steps followed were : Close the indices … --- ## [Add array of object into an array through logstash](https://discuss.elastic.co/t/add-array-of-object-into-an-array-through-logstash/318335)
**Author:** [@yashveer](https://discuss.elastic.co/u/yashveer)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 1:45pm UTC](https://discuss.elastic.co/t/add-array-of-object-into-an-array-through-logstash/318335 "2022-11-07T13:45:57Z")
NEED TO DO THIS THOROUGH LOGSTASH ONLY ''' index =\> "test-voq-local" script\_type =\> "inline" document\_id =\> "%{\[i\_odino\]}" scripted\_upsert =\> true action =\> "update" script =\> "ctx.\_source.record.add(params.data); pa… --- ## [Logstash output plugin data changes when stored to file as compared to standard output stdout{ }](https://discuss.elastic.co/t/logstash-output-plugin-data-changes-when-stored-to-file-as-compared-to-standard-output-stdout/318186)
**Author:** [@brbhanushali](https://discuss.elastic.co/u/brbhanushali)\ **Replies:** 3\ **Last updated:** [November 7, 2022, 1:50pm UTC](https://discuss.elastic.co/t/logstash-output-plugin-data-changes-when-stored-to-file-as-compared-to-standard-output-stdout/318186 "2022-11-07T13:50:59Z")
Hello All, I am new to logstash and working on a task to get syslogs from GitHub to Logstash to Elastic Search. I am facing a strange problem in Logstash. To understand the format that is coming on to input port of th… --- ## [Time Filter Element in Canvas](https://discuss.elastic.co/t/time-filter-element-in-canvas/318246)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 1:50pm UTC](https://discuss.elastic.co/t/time-filter-element-in-canvas/318246 "2022-11-07T13:50:02Z")
For this problem, I'm on version 7.11.1 and viewing Kibana in Chrome. When I add the time filter element to a Canvas workpad, it is not functional (when I click on the time control, it doesn't respond to let me select th… --- ## [No logs from Elastic Agent](https://discuss.elastic.co/t/no-logs-from-elastic-agent/318321)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 1\ **Last updated:** [November 7, 2022, 1:49pm UTC](https://discuss.elastic.co/t/no-logs-from-elastic-agent/318321 "2022-11-07T13:49:42Z")
Hello, I'm trying to ingest datas from elastic agents but I have no logs. This is the situation: Thank u --- ## [At least one primary shard for the index \[.security-7\] is unavailable issue](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable-issue/316149)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 8\ **Last updated:** [November 7, 2022, 12:31pm UTC](https://discuss.elastic.co/t/at-least-one-primary-shard-for-the-index-security-7-is-unavailable-issue/316149 "2022-11-07T12:31:23Z")
Hi I have a two-node cluster with IP "0.0.0.1" , "0.0.0.2". One of my VMs "0.0.0.2" suddenly stopped, and when I start it, the cluster health was RED. Then I restart both VMs again and below message has been found in th… --- ## [Can we tokenise emailid text along with split characters in elasticsearch and prefixes tokens?](https://discuss.elastic.co/t/can-we-tokenise-emailid-text-along-with-split-characters-in-elasticsearch-and-prefixes-tokens/318329)
**Author:** [@Karthik\_Amar](https://discuss.elastic.co/u/Karthik_Amar)\ **Replies:** 0\ **Last updated:** [November 7, 2022, 12:12pm UTC](https://discuss.elastic.co/t/can-we-tokenise-emailid-text-along-with-split-characters-in-elasticsearch-and-prefixes-tokens/318329 "2022-11-07T12:12:08Z")
I have a use case where i want to tokenise emailId with starts with filter along with punctuations. for example. email - ona.ki@gl.co I want to know whether the the following matches for the above is possible to achiev… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=739) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=741)